CVE-2026-43440: net/mana: Null service_wq on setup error to prevent double destroy
In the Linux kernel, the following vulnerability has been resolved:
net/mana: Null servicewq on setup error to prevent double destroy
In managdsetup() error path, set gc->servicewq to NULL after destroyworkqueue() to match the cleanup in managdcleanup(). This prevents a use-after-free if the workqueue pointer is checked after a failed setup.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43440?
CVE-2026-43440 has been classified as a low severity vulnerability in the Linux kernel.
How do I fix CVE-2026-43440?
To fix CVE-2026-43440, update your Linux kernel to the latest stable version provided by your distribution.
What type of vulnerability is CVE-2026-43440?
CVE-2026-43440 is a null pointer dereference vulnerability found in the net/mana subsystem of the Linux kernel.
What are the potential impacts of CVE-2026-43440?
Exploitation of CVE-2026-43440 could lead to denial of service or system crashes due to improper handling of work queues.
Which versions of the Linux kernel are affected by CVE-2026-43440?
CVE-2026-43440 affects certain versions of the Linux kernel prior to the release of the patch in the stable updates.